Every plan carries free SSL, and there are upgrades if wanted

A domain-validated (DV) certificate confirms one thing: that whoever requested it controls the domain. That's why free certificates issue in moments — there's no paperwork, just a DNS or file check. Organization-validated (OV) and Extended Validation (EV) certificates add a real verification step, where the certificate authority checks business registration records and confirms the company by phone before issuing anything.

That extra check is why EV certificates carry the deeper warranty — up to $1.5 million in our cover — and why they're worth the wait for stores, membership sites or anything handling sensitive customer data. DV is the right default for a blog or brochure site; OV and EV earn their keep once real transactions and real trust are on the line.

Free managed migration doesn't stop at copying files and databases — it's timed so a fresh free SSL certificate is requested and issued the moment your domain resolves to our servers, closing the gap between the old host's certificate and ours before visitors ever notice a difference.

That matters most for stores and login-gated sites, where even a short HTTPS gap can trip browser warnings or break a checkout flow mid-migration. Coordinating the DNS cutover and the certificate issuance together is a standard part of the migration, not an extra step you have to request.

SSL being active doesn't always mean the warning disappears. Mixed content — a page served over HTTPS that still loads an image, script or stylesheet over plain HTTP — is the usual culprit, and it often traces back to a theme, plugin or old database entry hardcoding an http:// link from before SSL was switched on.

24/7 human support can scan for those stray references and help configure a forced HTTPS redirect so every request, including old bookmarked links, is upgraded automatically rather than left to trigger the warning again on the next page load.

Encrypting data in transit is one of the baseline requirements card processors expect under PCI DSS, and every plan's HTTPS covers that piece for checkout, login and account pages by default — no separate certificate purchase needed just to meet it.

SSL alone doesn't make a store fully PCI compliant; that also depends on how the payment processor and cart software handle card data. What our NVMe SSD and LiteSpeed stack does add is speed — checkout pages stay fast even with the extra handshake overhead HTTPS introduces, so encryption doesn't come at the cost of a slower cart.